First off, I would like to extend a *huge* thanks to Chris Wakelin for sharing is customized version of pfdnacluster_master. It's going to let us run Snort and Argus on a single physical interface and allow us to not invest in more Gigamon hardware.
When I run snort on 20 cores, most of the instances run at like 20-60% CPU. But a few of the instances consistently run at 90-100% CPU. Is there any way to control how traffic is being split up by DNA/Libzero? Thanks again Chris! Craig
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
